Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
File:                     KHTka_Y26mPl0SNi9VG4CydxR4A.mft (raw, json)
Hash identifier:          8WFcsA5VI45jq9xnSMXBOQNKgxw2eSYCEeJhBR+zsKM=
Subject key identifier:   7A:BE:7A:AC:0E:C4:69:92:17:ED:35:61:30:41:18:0D:1B:60:1F:8B
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       0194BCA9CCC49F6C16692C92644740A1AA45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 14:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:32 +0000
Files and hashes:         1: 8EzVvdqmnyUUlh032i_MVZutQmM.roa (hash: Y0OSVWz+Kd1Sv3rConcDjABoFQUY9BXVpm1Sb1N4NUM=)
                          2: AfbOEK2Wm_yxkXpDRuaaK0yepic.roa (hash: ylTbU6i+mICebl27vpw8wdGnWyWsjN4+lLcu4NPOkSU=)
                          3: F22dqci9sETpBxI71_zF8Iz2jLY.roa (hash: u1ifxP2pZLgjnEg+EL5SHToHcyGG9LmZXTUGx5mHKTM=)
                          4: KHTka_Y26mPl0SNi9VG4CydxR4A.crl (hash: DRPqMOt7pel8K4z9piRaxUss5z8rcT6sPYLqSwlzHJo=)
                          5: MWXFWupmeH0x6eo-nSAsEyxsUK4.roa (hash: FcrTWOvQwbii+S/ULF+HgAsrIKV1okSCxZzQQr84deE=)
                          6: iWBAR1OSSXBoMflzHe0qbIrF3FU.roa (hash: rpKSuxScT2SachfPDTxZm8SPZLmo9ym/QvFcyjf38Z4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:cc:c4:9f:6c:16:69:2c:92:64:47:40:a1:aa:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: Jan 31 14:00:32 2025 GMT
            Not After : Feb  1 14:00:32 2025 GMT
        Subject: CN=7abe7aac0ec4699217ed35613041180d1b601f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:1c:d8:4c:4b:97:d6:81:0d:a8:02:21:7d:
                    96:3e:07:ca:e9:62:c8:2c:c0:9d:7f:07:44:1b:54:
                    85:b6:9e:63:c3:94:64:26:b7:ef:f6:c0:9e:a0:6c:
                    4d:4a:f4:d6:ab:a2:c4:3d:a4:8f:81:94:2f:0e:eb:
                    5c:c4:8b:19:ce:99:ec:71:c4:4c:2e:65:46:b6:f4:
                    9e:12:99:44:56:5a:38:f2:80:0a:8e:af:11:ec:39:
                    68:9e:0d:09:67:19:d1:2e:2f:a2:4f:a6:b3:2c:f3:
                    e2:19:84:66:42:fb:58:33:20:e8:2b:3c:f4:07:8f:
                    84:c6:d1:0a:94:1e:0f:0f:63:9b:23:d2:5e:1b:1a:
                    9d:29:19:58:d5:fc:2f:a8:b0:e2:f4:e9:e1:0b:e3:
                    3d:ca:e1:fc:39:59:47:70:2d:d9:d4:56:9a:d7:70:
                    89:d2:7d:24:18:1b:e5:e0:cb:3a:6f:ce:fc:d4:11:
                    3f:72:16:af:aa:7f:d9:fe:cd:b2:cf:81:0f:c1:42:
                    2f:96:4b:70:ea:1e:7d:48:87:0c:3b:84:35:db:c3:
                    7e:bf:54:a9:aa:eb:bc:0d:b7:b3:4d:45:b8:56:02:
                    d5:19:87:c2:55:41:94:58:ec:1f:40:ce:20:c5:d5:
                    11:78:ff:8e:25:f8:20:b1:d6:e9:cf:ff:9f:0f:13:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BE:7A:AC:0E:C4:69:92:17:ED:35:61:30:41:18:0D:1B:60:1F:8B
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:02:ec:65:fd:81:53:9c:3e:ee:db:95:bd:a7:01:34:91:0d:
         50:33:85:99:6a:fd:2a:20:b2:c2:2b:4e:b1:04:b1:97:0a:56:
         73:a1:43:28:35:17:54:09:ef:ce:fe:f2:b1:11:74:d1:fe:14:
         35:22:3c:3e:31:ee:f2:f4:74:c2:51:a6:cb:1c:d2:3c:e6:c9:
         d6:cf:4b:0d:13:c4:75:26:ac:f4:48:70:b1:c9:fb:66:c6:da:
         3b:cb:e7:46:f8:75:8e:45:da:45:40:0f:3e:ad:b7:f0:b3:9b:
         c4:06:c8:0b:60:f2:05:7b:97:12:b6:2c:4e:a0:97:46:8b:99:
         9c:9c:a6:32:4a:4c:c0:f3:1a:ab:99:9c:de:6e:d0:e8:e2:ef:
         76:97:3d:f2:62:d5:0f:78:74:34:23:bd:79:d2:b4:10:35:a3:
         8b:6f:0a:23:81:75:7e:5c:4b:7d:0f:52:01:d6:80:98:23:0d:
         6c:cb:ac:ba:f8:e7:0e:a1:95:38:13:6e:70:42:5f:a5:bc:12:
         48:db:65:cb:58:7f:66:b8:3f:b9:a2:54:ca:90:d0:fe:7c:10:
         3a:09:f3:71:4b:7d:5e:db:1e:28:23:64:e0:5b:73:e6:ad:c4:
         46:d4:01:ea:b3:c0:38:ef:49:1c:35:f4:6b:ee:30:52:e4:a4:
         18:3f:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:11 2025 by rpki-client